Falhas do tipo CWE-472

154 resultados

Estouro de inteiro

Ocorre quando uma operação aritmética produz um valor que excede o intervalo máximo que o tipo inteiro pode representar, causando wraparound (volta ao negativo ou zero) ou comportamento indefinido. O resultado inesperado pode levar a alocações de memória incorretas, bypasses de validação ou corrupção de lógica crítica.

Exemplo

Um servidor calcula o tamanho de buffer como `tamanho_usuario + 100`. Se tamanho_usuario for próximo ao máximo de um inteiro de 32 bits, a soma estoura e vira um número pequeno (ou negativo), provocando alocação de buffer mínimo. O código então escreve dados além do espaço reservado, causando heap overflow.

Como mitigar

Valide entradas numéricas contra limites realistas antes de operações aritméticas; use tipos de dados com maior capacidade (64 bits) quando apropriado; implemente verificações de estouro explícitas (ex: `if (a > INT_MAX - b)`) ou prefira linguagens com checagem automática de inteiros (Rust, alguns compiladores C modernos com flags de segurança).

CVE-2026-13938HIGHInteger overflow in Fonts in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory write via a cEPSS 0.3%CVE-2026-14387CRITICALInteger overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a craEPSS 0.3%CVE-2026-7571HIGHKeycloak: keycloak: access token disclosure and implicit flow bypass via forged client dataEPSS 0.3%CVE-2025-30152MEDIUMSylius PayPal Plugin has an Order Manipulation Vulnerability after PayPal CheckoutEPSS 0.3%CVE-2026-4679HIGHInteger overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a EPSS 0.3%CVE-2025-8198HIGHMinimogWP – The High Converting eCommerce WordPress Theme <= 3.9.0 - Unauthenticated Price ManipulationEPSS 0.3%CVE-2026-41353HIGHOpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime SelectionEPSS 0.3%CVE-2026-10986HIGHInteger overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via aEPSS 0.3%CVE-2025-54832MEDIUMOPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modificationEPSS 0.3%CVE-2026-32699MEDIUMFacturaScripts unauthorized modification of immutable nick field via EditUser controllerEPSS 0.3%CVE-2026-5277HIGHInteger overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer proEPSS 0.3%CVE-2025-25382HIGHAn issue in the Property Tax Payment Portal in Information Kerala Mission SANCHAYA v3.0.4 allows attackers to arbitrarily modify payment amoEPSS 0.3%CVE-2026-13796CRITICALInteger overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process toEPSS 0.3%CVE-2026-67363HIGHJoomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2EPSS 0.3%CVE-2026-11088CRITICALInteger overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to poteEPSS 0.3%CVE-2026-4911MEDIUMBooking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' ParameterEPSS 0.3%CVE-2026-34751CRITICALPayload has Unvalidated Input in Password Recovery EndpointsEPSS 0.3%CVE-2026-14389HIGHInteger overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potenEPSS 0.3%CVE-2026-13801HIGHInteger overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process toEPSS 0.3%CVE-2026-13841HIGHInteger overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potenEPSS 0.3%